Technical Information
- %TEMP%\13a.tmp
- from <Full path to file> to <PATH_SAMPLE>.docx
- '%TEMP%\13a.tmp' --ping<Full path to file> B9371E0BFA3EF7A88365C76BBD013B6FAA46C00E7F4C2C768EDF208A317A7F2CFD085D73DC2FF3A1D803F48AA8E4EA0C64E49805A4EBBFE963B8F681F6C25DD3
- '%TEMP%\13a.tmp' --ping<Full path to file> B9371E0BFA3EF7A88365C76BBD013B6FAA46C00E7F4C2C768EDF208A317A7F2CFD085D73DC2FF3A1D803F48AA8E4EA0C64E49805A4EBBFE963B8F681F6C25DD3' (with hidden window)
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<PATH_SAMPLE>.docx"